Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/d8e5aa-b119-459e-93f6-a146d6047337/1/_byekQMWvi8EM6qVOSzWc53Ca4Y.mft
File:                     _byekQMWvi8EM6qVOSzWc53Ca4Y.mft (raw, json)
Hash identifier:          grTwyZ3EGU2Guo7bZZHW1spiDiwonuAc2HN3/qNec00=
Subject key identifier:   6F:12:11:51:FB:90:E3:22:94:34:65:1C:D6:9D:00:9C:BA:5F:29:B3
Authority key identifier: FD:BC:9E:91:03:16:BE:2F:04:33:AA:95:39:2C:D6:73:9D:C2:6B:86
Certificate issuer:       /CN=fdbc9e910316be2f0433aa95392cd6739dc26b86
Certificate serial:       019ED3BDE83391475A9A2D2CA9273F2FAF45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_byekQMWvi8EM6qVOSzWc53Ca4Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/d8e5aa-b119-459e-93f6-a146d6047337/1/_byekQMWvi8EM6qVOSzWc53Ca4Y.mft
Manifest number:          1965
Signing time:             Wed 17 Jun 2026 04:01:38 +0000
Manifest this update:     Wed 17 Jun 2026 04:01:38 +0000
Manifest next update:     Thu 18 Jun 2026 04:01:38 +0000
Files and hashes:         1: W51aSCH5iLe_5vEXYpA2X4F2HE8.roa (hash: ZbZbQYSFnkBpfEvsfFoB6giW5sjyWzNWyKbHcpK0sVE=)
                          2: _byekQMWvi8EM6qVOSzWc53Ca4Y.crl (hash: OWh6DauipPmu4V7rfoTXQKn5gftrvimHL73I96FU754=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d3/d8e5aa-b119-459e-93f6-a146d6047337/1/_byekQMWvi8EM6qVOSzWc53Ca4Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d3/d8e5aa-b119-459e-93f6-a146d6047337/1/_byekQMWvi8EM6qVOSzWc53Ca4Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_byekQMWvi8EM6qVOSzWc53Ca4Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 18 Jun 2026 04:01:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:d3:bd:e8:33:91:47:5a:9a:2d:2c:a9:27:3f:2f:af:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fdbc9e910316be2f0433aa95392cd6739dc26b86
        Validity
            Not Before: Jun 17 04:01:38 2026 GMT
            Not After : Jun 18 04:01:38 2026 GMT
        Subject: CN=6f121151fb90e3229434651cd69d009cba5f29b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:c1:40:fa:a0:cf:5e:40:87:26:1e:3d:2f:59:
                    e1:b5:9f:17:76:3d:46:97:29:36:e4:14:07:16:7d:
                    c9:37:14:63:be:5d:d3:81:cc:50:f1:83:40:23:c6:
                    32:80:fb:0f:c0:8d:3b:0a:1c:ed:8c:84:97:f7:3a:
                    f8:e4:39:7e:95:69:b0:1f:a0:db:1a:64:df:e7:5a:
                    57:ca:d5:93:8c:68:dc:58:02:52:97:d3:72:74:92:
                    b6:8e:70:13:55:e9:5b:96:7e:be:45:c9:8c:0a:84:
                    71:91:aa:75:4f:b0:35:90:b5:71:aa:8f:cd:ad:4b:
                    3f:1e:20:a2:04:89:c8:9c:6a:c1:ed:fd:11:25:06:
                    ee:a3:4c:3a:aa:2d:6e:aa:95:04:e6:33:55:e1:1f:
                    9b:f6:9c:66:b3:61:03:fb:dc:4e:3f:28:e4:ae:42:
                    b1:4c:a4:44:7f:a5:a5:0c:8c:30:41:90:bc:b2:27:
                    db:eb:89:bf:6d:5a:7e:ef:6b:3a:3d:2c:2c:76:ff:
                    fc:83:b2:3a:f3:67:d4:f9:6f:d4:21:16:f9:bb:31:
                    b6:6d:5a:4e:6b:d4:06:86:d6:ac:1c:c1:ab:c6:d1:
                    07:78:45:7b:ea:92:f5:e2:87:06:b6:76:bf:5a:de:
                    79:fa:52:b5:7a:11:54:8c:1b:ce:18:59:1f:63:ea:
                    1b:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:12:11:51:FB:90:E3:22:94:34:65:1C:D6:9D:00:9C:BA:5F:29:B3
            X509v3 Authority Key Identifier:
                keyid:FD:BC:9E:91:03:16:BE:2F:04:33:AA:95:39:2C:D6:73:9D:C2:6B:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_byekQMWvi8EM6qVOSzWc53Ca4Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/d8e5aa-b119-459e-93f6-a146d6047337/1/_byekQMWvi8EM6qVOSzWc53Ca4Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/d8e5aa-b119-459e-93f6-a146d6047337/1/_byekQMWvi8EM6qVOSzWc53Ca4Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:71:02:70:86:1c:7a:cf:ca:b6:44:69:cd:fc:2b:0d:4e:2f:
         0a:19:16:79:a6:db:11:56:9a:74:1a:04:05:b1:e5:2a:d2:23:
         75:e2:8f:d4:b7:50:e5:5f:01:de:77:fa:8b:91:ed:d8:4f:86:
         ff:71:1b:12:38:73:f3:1c:14:61:41:d1:7c:6a:bc:09:42:30:
         c9:41:1e:a2:4f:d0:31:33:ea:50:bb:de:d7:d8:8d:f9:4b:72:
         44:dc:1b:d0:9f:d8:cd:a7:58:bd:f9:06:f0:f3:ca:4f:2f:62:
         c9:48:07:97:8a:82:64:17:70:4c:75:06:89:bb:04:61:19:46:
         4d:f3:b7:14:65:75:6e:79:eb:65:05:77:a0:2f:82:e5:62:ca:
         5e:00:44:a7:3b:0f:4c:8d:62:88:f6:dd:5b:a0:ac:dc:ba:90:
         6a:9e:36:ba:93:64:56:47:11:78:5e:97:23:f8:9a:b3:44:f2:
         2e:b0:7d:3f:4b:71:7e:b2:70:7c:2a:6e:4b:ea:70:c4:ee:7e:
         20:25:7c:55:db:36:ba:1f:45:6c:9d:06:60:da:a7:d6:e9:cb:
         1f:0f:31:5d:30:16:1b:bc:a5:e2:00:cb:6d:af:39:94:ca:7f:
         2d:38:e2:0f:7a:80:9d:dc:8e:b5:d9:a8:0a:f5:d8:ed:9b:35:
         31:c9:7a:11
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7TvegzkUdami0sqSc/L69FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZkYmM5ZTkxMDMxNmJlMmYwNDMzYWE5NTM5MmNkNjczOWRj
MjZiODYwHhcNMjYwNjE3MDQwMTM4WhcNMjYwNjE4MDQwMTM4WjAzMTEwLwYDVQQD
Eyg2ZjEyMTE1MWZiOTBlMzIyOTQzNDY1MWNkNjlkMDA5Y2JhNWYyOWIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs8FA+qDPXkCHJh49L1nhtZ8Xdj1G
lyk25BQHFn3JNxRjvl3TgcxQ8YNAI8YygPsPwI07ChztjISX9zr45Dl+lWmwH6Db
GmTf51pXytWTjGjcWAJSl9NydJK2jnATVelbln6+RcmMCoRxkap1T7A1kLVxqo/N
rUs/HiCiBInInGrB7f0RJQbuo0w6qi1uqpUE5jNV4R+b9pxms2ED+9xOPyjkrkKx
TKREf6WlDIwwQZC8sifb64m/bVp+72s6PSwsdv/8g7I682fU+W/UIRb5uzG2bVpO
a9QGhtasHMGrxtEHeEV76pL14ocGtna/Wt55+lK1ehFUjBvOGFkfY+obwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG8SEVH7kOMilDRlHNadAJy6XymzMB8GA1UdIwQY
MBaAFP28npEDFr4vBDOqlTks1nOdwmuGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX2J5ZWtRTVd2aThFTTZxVk9TeldjNTNDYTRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9kOGU1YWEtYjExOS00NTllLTkzZjYt
YTE0NmQ2MDQ3MzM3LzEvX2J5ZWtRTVd2aThFTTZxVk9TeldjNTNDYTRZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy9kOGU1YWEtYjExOS00NTllLTkzZjYtYTE0NmQ2MDQ3MzM3
LzEvX2J5ZWtRTVd2aThFTTZxVk9TeldjNTNDYTRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYnECcIYc
es/KtkRpzfwrDU4vChkWeabbEVaadBoEBbHlKtIjdeKP1LdQ5V8B3nf6i5Ht2E+G
/3EbEjhz8xwUYUHRfGq8CUIwyUEeok/QMTPqULve19iN+UtyRNwb0J/YzadYvfkG
8PPKTy9iyUgHl4qCZBdwTHUGibsEYRlGTfO3FGV1bnnrZQV3oC+C5WLKXgBEpzsP
TI1iiPbdW6Cs3LqQap42upNkVkcReF6XI/ias0TyLrB9P0txfrJwfCpuS+pwxO5+
ICV8Vds2uh9FbJ0GYNqn1unLHw8xXTAWG7yl4gDLba85lMp/LTjiD3qAndyOtdmo
CvXY7Zs1Mcl6EQ==
-----END CERTIFICATE-----
Generated at Wed Jun 17 12:47:41 2026 by rpki-client